Skip to main content

Security & Custody

Where your funds actually are

Zipmex is non-custodial. In practice that means:

  • Swaps, terminal trades, prediction positions — assets sit in your own wallet or in on-chain positions only your keys control. Zipmex has no ability to move, freeze, or access them.
  • Perpetuals — margin you deposit goes to your own trading account on Orderly Network's vault contracts, the audited settlement infrastructure the order book runs on. Withdrawals are transactions you sign, returned to your own wallet. Zipmex is the interface, not the custodian.

There is no platform balance, no internal ledger, and no "withdrawal request" that a company processes. If the Zipmex website disappeared tomorrow, your wallet assets and on-chain positions would remain yours.

What this means for you

The freedom cuts both ways: you are your own bank.

  • Your seed phrase is everything. Anyone holding it holds your funds. Zipmex will never ask for it — no support agent, no pop-up, no "verification". Any such request is an attack.
  • There is no password reset. Lose the wallet and its recovery phrase, and no one — including us — can restore access.
  • Signing is authorizing. Read what your wallet shows before approving. A signature is irrevocable once confirmed.

Practical rules

  • Check the URL. Bookmark trade.zipmex.com and use the bookmark. Phishing clones of trading sites are common; the wallet-drain happens on the fake site's "connect" prompt.
  • Keep your main holdings in a separate wallet. Trade from a wallet funded with what you intend to trade; keep long-term holdings in a wallet (ideally hardware) that never touches dApps.
  • Review token approvals periodically and revoke ones you no longer use.
  • Be sceptical of tokens with identical names. Verify the mint address, holder count, and audit flags on the token page before buying.
  • Official links only. Our X is x.com/zipmex, Telegram is t.me/zipmexdex. Admins never DM first and never ask you to "validate" or "sync" a wallet.

Wallet sessions

If your wallet connection behaves oddly after being idle — every confirmation failing that worked yesterday — disconnect and reconnect the wallet. Mobile wallet sessions expire; a fresh connection fixes what looks like a transaction problem.

Self-custody transfers responsibility to you. Take the seed-phrase rules above literally — the overwhelming majority of user losses in DeFi come from phishing and leaked recovery phrases, not from protocol failures.